QR payments

How to Check a Payment QR Code Before You Pay

By GoTap3 min read

Before paying through a QR code, check where the code came from, use the appropriate payment app, and review the recipient and amount before authorising.

A code that scans successfully is readable. That alone does not establish that it belongs to the business you intended to pay.

Check where the code came from

At a shop, use the payment code the merchant directs you to. If several signs are displayed, confirm which one belongs to the business and which payment service it uses.

Look for anything that needs clarification: a sticker covering another code, a business name that does not match the setting, or a payment sign placed somewhere unexpected.

A replacement sticker can be legitimate. The useful response is to verify it with the merchant before paying.

For an online order, confirm payment instructions through the business contact you already know. Be cautious if an unfamiliar number suddenly sends different details.

Use an app that supports the code

QR codes can contain different kinds of information. Some open websites; others are intended for particular payment services.

For a GoTap QR payment, scan through GoTap and review the payment details there. Both the sender and recipient need GoTap.

Recognising a code with your phone camera does not mean every banking or payment app can use it.

See Can You Pay Any QR Code from Your Banking App?

If it opens a website, inspect the destination

The US Federal Trade Commission has documented scams in which replacement QR codes lead people to imitation websites.

Before entering information, check the website address carefully. Watch for misspellings, extra words or a domain that differs from the service you expected.

A padlock or HTTPS connection does not establish that the business behind a website is trustworthy.

If something looks wrong, close the page and open the provider’s app or known website yourself. Avoid entering your banking password, card details or other sensitive information into an unexpected page.

Do not give your PIN or one-time password to a seller or someone claiming to help you complete the payment.

Review who will receive the money

Check the recipient name on the payment review screen.

A business may receive payments under a registered company name that differs from its shop sign. Ask the merchant to explain the difference before proceeding.

Do not continue simply because someone says, “That is the account everyone uses.” You should understand who you are paying.

Then check:

  • The amount and currency.
  • Any fee shown.
  • The total you are authorising.
  • The account or balance you are paying from.

If anything differs from what you agreed, pause and resolve it.

Check the result after authorising

Open the transaction record and check the status. The merchant should verify the incoming payment in their own account before treating the order as paid.

Keep the transaction reference, especially for a delivery, deposit or collection later.

If the recipient or amount was wrong, contact your payment provider promptly through its official support channel. Explain what happened and provide the reference. Recovery is not guaranteed.

If you entered sensitive credentials on a suspicious page, secure the affected account through the genuine app or website and contact the provider.

The most useful check happens before authorisation: the right recipient, the agreed amount and a payment method you recognise.

Reference: FTC: Scammers hide harmful links in QR codes.

Get GoTap